CVE-2016-2025: Infoleak
Published May 30, 2016
·Updated
HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components.
Affected Software
8 affected components
hp Service Manager=9.30
hp Service Manager=9.31
hp Service Manager=9.32
hp Service Manager=9.33
hp Service Manager=9.34
hp Service Manager=9.35
hp Service Manager=9.40
hp Service Manager=9.41
Remediation
Event History
May 30, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2025?
CVE-2016-2025 has a medium severity rating due to the potential for remote attackers to access sensitive information.
2
How do I fix CVE-2016-2025?
To fix CVE-2016-2025, update HPE Service Manager to a patched version that addresses the vulnerability.
3
What versions of HPE Service Manager are affected by CVE-2016-2025?
CVE-2016-2025 affects HPE Service Manager versions 9.30 through 9.41.
4
What types of information can be accessed due to CVE-2016-2025?
CVE-2016-2025 may allow remote attackers to obtain sensitive information from components such as the Web Client and Mobility.
5
Is CVE-2016-2025 a known exploit?
CVE-2016-2025 is documented, but specific exploit details have not been disclosed publicly.